Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: SMO3rEUuqeX0Gapxy5d/j9/HPIEayWL8bhRiIyxAy1Q=
Subject key identifier: 7A:1E:C8:BB:49:E7:5D:B1:94:50:A7:66:73:6E:75:88:0F:87:28:9E
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 019855328CCC1C8E2EFABC4170B9083AEC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 08:00:32 +0000
Manifest this update: Tue 29 Jul 2025 08:00:32 +0000
Manifest next update: Wed 30 Jul 2025 08:00:32 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: NYvre0vQmXha1RAzSvV4MdrchjBMSNn9Xp0zhPSPel0=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:8c:cc:1c:8e:2e:fa:bc:41:70:b9:08:3a:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jul 29 08:00:32 2025 GMT
Not After : Jul 30 08:00:32 2025 GMT
Subject: CN=7a1ec8bb49e75db19450a766736e75880f87289e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:f6:15:d1:d6:5e:dc:8b:75:f6:62:74:c5:
58:01:82:de:46:4d:06:d9:14:f0:d7:7e:d7:f5:0a:
32:7e:8e:f8:1c:87:52:d8:e8:e1:57:ef:e9:45:65:
5d:89:0b:8e:95:9c:1a:67:39:5e:8b:be:82:cb:77:
8e:49:15:a5:ad:47:d1:c3:ec:10:34:54:87:8b:e7:
56:8d:1b:b0:69:1d:d3:11:ba:79:15:12:87:ab:f3:
7e:c5:0f:b9:44:0e:f8:29:fd:36:9f:40:ee:29:c3:
9b:d0:4e:b4:f2:33:8e:a4:a5:fb:e0:02:9a:f4:14:
21:64:1a:44:22:b4:c9:82:70:c6:fc:b0:65:dc:8c:
b4:14:81:a3:69:b8:fe:39:ec:12:8d:44:38:fe:67:
f2:f2:c2:77:80:65:6b:3b:6c:6f:7d:a7:3f:da:fa:
07:98:9e:b3:7c:3e:d2:1f:1b:dd:0c:b5:79:92:8d:
b9:a3:74:16:7a:29:a4:9f:de:7a:fb:37:e8:dd:63:
d3:e0:9f:51:29:15:d7:bb:48:4f:dd:0a:dc:00:bf:
47:9a:1d:ed:25:6e:fd:50:17:52:10:26:da:6a:c4:
66:bd:ec:40:4c:ec:16:b6:93:e7:d5:07:63:05:78:
33:62:e7:3c:55:0c:58:4d:67:82:4a:cd:be:f7:b4:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:C8:BB:49:E7:5D:B1:94:50:A7:66:73:6E:75:88:0F:87:28:9E
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e6:08:60:f6:f9:7f:0c:94:84:87:08:a8:3b:58:0f:a7:32:
20:4b:d6:72:db:96:4e:30:fa:d4:93:e6:08:cd:18:82:b8:e1:
87:b7:29:9e:ca:93:ca:49:5b:f5:39:f5:0e:94:2b:b0:45:4d:
59:68:d0:98:fd:62:68:01:08:ad:13:79:6e:a6:2a:c4:f8:b6:
1e:cc:2f:bc:f3:0f:83:47:1b:d6:e2:56:d1:04:18:9c:e7:31:
25:92:3c:47:6f:50:24:f6:a9:71:81:64:67:3a:54:63:35:c0:
c4:e1:8a:d1:2e:6d:8a:1e:24:fa:ad:83:1a:80:8f:c3:e7:a3:
fe:e5:0f:56:d6:d2:0c:97:68:a2:ec:6b:72:e7:2b:81:e3:64:
85:01:22:74:03:10:8f:fa:6b:60:1a:b4:1b:25:95:d8:a0:9d:
0e:dc:e5:8f:09:7b:76:66:07:50:e0:0b:a9:a1:66:55:b0:a7:
1e:83:e0:23:24:e3:ad:9a:9d:72:f5:d8:cb:ff:33:00:3d:63:
a1:45:05:3e:04:4b:60:4b:2e:47:a2:fb:04:74:48:68:db:76:
73:72:d7:62:9c:8c:73:8b:81:8c:09:c2:9c:01:5e:21:e7:fa:
e3:ce:55:41:60:dd:94:bb:7c:10:6b:2a:1e:e8:e3:9e:25:85:
8f:f1:ca:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVMozMHI4u+rxBcLkIOuyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc2MmNkNTNhMDNlMzIyNDIwNDZhMDFhOGUxY2NhYzk0
NmI2ZGQwHhcNMjUwNzI5MDgwMDMyWhcNMjUwNzMwMDgwMDMyWjAzMTEwLwYDVQQD
Eyg3YTFlYzhiYjQ5ZTc1ZGIxOTQ1MGE3NjY3MzZlNzU4ODBmODcyODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZn2FdHWXtyLdfZidMVYAYLeRk0G
2RTw137X9Qoyfo74HIdS2OjhV+/pRWVdiQuOlZwaZzlei76Cy3eOSRWlrUfRw+wQ
NFSHi+dWjRuwaR3TEbp5FRKHq/N+xQ+5RA74Kf02n0DuKcOb0E608jOOpKX74AKa
9BQhZBpEIrTJgnDG/LBl3Iy0FIGjabj+OewSjUQ4/mfy8sJ3gGVrO2xvfac/2voH
mJ6zfD7SHxvdDLV5ko25o3QWeimkn956+zfo3WPT4J9RKRXXu0hP3QrcAL9Hmh3t
JW79UBdSECbaasRmvexATOwWtpPn1QdjBXgzYuc8VQxYTWeCSs2+97QLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoeyLtJ512xlFCnZnNudYgPhyieMB8GA1UdIwQY
MBaAFG9XYs1ToD4yJCBGoBqOHMrJRrbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgt
NzljYmYzOTVkNzI2LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgtNzljYmYzOTVkNzI2
LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+YIYPb5
fwyUhIcIqDtYD6cyIEvWctuWTjD61JPmCM0Ygrjhh7cpnsqTyklb9Tn1DpQrsEVN
WWjQmP1iaAEIrRN5bqYqxPi2HswvvPMPg0cb1uJW0QQYnOcxJZI8R29QJPapcYFk
ZzpUYzXAxOGK0S5tih4k+q2DGoCPw+ej/uUPVtbSDJdoouxrcucrgeNkhQEidAMQ
j/prYBq0GyWV2KCdDtzljwl7dmYHUOALqaFmVbCnHoPgIyTjrZqdcvXYy/8zAD1j
oUUFPgRLYEsuR6L7BHRIaNt2c3LXYpyMc4uBjAnCnAFeIef6485VQWDdlLt8EGsq
HujjniWFj/HKCA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:21 2025 by rpki-client